.env.example

# CrowdStrike API Credentials
# Obtain these from your CrowdStrike Falcon console
CROWDSTRIKE_CLIENT_ID=your_client_id_here
CROWDSTRIKE_CLIENT_SECRET=your_client_secret_here
CROWDSTRIKE_BASE_URL=https://api.crowdstrike.com

# Default NGSIEM Repository
# This can be overridden per-request
NGSIEM_DEFAULT_REPOSITORY=your_repository_name

# Logging Configuration
LOG_LEVEL=INFO
# LOG_FILE=ngsiem_mcp.log  # Only needed for stdio mode (ngsiem_mcp_server.py)

# HTTP Server Configuration (for ngsiem_http_server.py)
# Generate a secure token: python -c "import secrets; print(secrets.token_hex(32))"
MCP_API_KEY=your_secure_api_key_here
MCP_HTTP_HOST=0.0.0.0
MCP_HTTP_PORT=8080
MCP_CORS_ORIGINS=*

# HTTP Server Logging
MCP_HTTP_ACCESS_LOG=ngsiem-mcp-http.log  # Uvicorn HTTP access logs (requests)
MCP_HTTP_APP_LOG=ngsiem-mcp-app.log     # Application logs (code errors, info)

# Thread Pool Configuration (optional)
# Controls concurrency for blocking NGSIEM API operations
# Default: min(32, cpu_count + 4) - Python's default ThreadPoolExecutor size
# NGSIEM_THREAD_POOL_SIZE=8